0xf4n9x/CVE-2022-24990

0xf4n9x/CVE-2022-24990

Releases0

Stars15

CVE-2022-24990 TerraMaster TOS unauthenticated RCE via PHP Object Instantiation

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-24989 ↗	Aug 20, 2023Sunday, 20 August 2023, 18:15	9.8 CRITICAL	—
TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for PHP Object Instantiation to the api.php?mobile/createRaid URI. (Shell metacharacters can be placed in raidtype because popen is used without any sanitization.) The credentials from CVE-2022-24990 exploitation can be used.
CVE-2022-24990 ↗	Feb 7, 2023Tuesday, 7 February 2023, 18:15	7.5 HIGH	—
TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response.